Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E0482BD4C35E11EFBAC2D677762E951A.roa
File: E0482BD4C35E11EFBAC2D677762E951A.roa (raw, json)
Hash identifier: cNosP6kuji/xo1+8zFj6XDOTzwQnCJquSiWQqFcicNk=
Subject key identifier: 1C:6B:D3:74:31:C7:9F:C2:CF:23:DA:43:B6:BB:36:F4:66:65:BD:40
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012624
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E0482BD4C35E11EFBAC2D677762E951A.roa
Signing time: Thu 26 Dec 2024 07:56:13 +0000
ROA not before: Thu 26 Dec 2024 07:56:09 +0000
ROA not after: Fri 12 Dec 2025 07:56:09 +0000
asID: 984
IP address blocks: 154.90.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75300 (0x12624)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 07:56:09 2024 GMT
Not After : Dec 12 07:56:09 2025 GMT
Subject: CN=676d0c1d-c1ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:82:6a:af:cf:4b:dd:73:d6:c7:da:23:53:95:
52:8d:ef:3f:49:e0:d0:aa:cc:1d:66:f2:e9:74:7b:
ad:b3:e3:c6:b9:0b:be:b9:10:f1:2e:dc:58:80:b1:
27:c8:a9:a4:48:11:3d:91:fb:6c:73:1c:6f:4c:ad:
4d:f2:75:93:3c:1e:62:4e:68:b2:98:a7:92:62:41:
9d:52:40:aa:93:7c:d6:17:55:3c:9e:65:92:4b:6d:
88:ea:f0:91:1a:33:3e:92:7f:05:44:95:b9:1a:69:
8f:fd:35:ea:e0:f7:38:e5:ce:ac:72:a0:2f:0f:cb:
d3:b8:aa:73:5c:43:f0:f9:92:fb:b3:f2:45:39:93:
1f:1a:46:2a:f6:98:f5:25:16:df:89:c3:12:da:a2:
c3:7e:4f:f8:c1:07:7d:88:d3:4b:95:fd:fc:23:b9:
63:9c:4a:e2:be:21:dd:27:44:e0:6b:93:66:84:28:
19:fb:a7:c4:cf:03:8c:ac:db:c7:e8:3b:df:15:19:
c8:a1:43:26:8f:ae:6b:ef:dd:9f:4f:09:d6:53:1c:
8b:17:0a:cf:09:95:ef:27:45:96:3b:d6:41:e3:fc:
28:6f:73:31:56:62:ec:88:01:b6:fa:34:7a:d4:96:
5d:27:f2:46:bc:b6:e3:70:6c:12:04:17:ee:22:b7:
7b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:6B:D3:74:31:C7:9F:C2:CF:23:DA:43:B6:BB:36:F4:66:65:BD:40
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E0482BD4C35E11EFBAC2D677762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.1.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:4a:c0:78:67:92:dc:ba:3d:87:1c:fb:71:f6:a2:f9:c8:42:
b9:84:0c:29:a6:c4:de:01:73:a7:bc:cf:36:e6:e5:08:78:60:
35:10:e3:c7:84:1b:fe:5a:88:51:1e:c5:3a:57:14:53:50:98:
fc:80:6e:c7:5e:5f:b3:45:9e:75:f0:4a:cd:c7:83:0d:65:df:
aa:4c:bf:55:73:53:23:c7:5b:85:1b:a2:c2:77:d1:e7:fe:52:
af:86:af:36:7e:dc:c9:b1:cb:ed:1d:3d:8c:6e:9c:e8:02:35:
3f:da:6c:25:e6:e0:f3:6d:7b:e3:91:e0:6f:db:2d:7c:69:e0:
12:d3:00:d9:c5:58:79:68:5f:04:28:0f:5c:66:36:7c:5a:e9:
8b:9d:f5:ff:08:e8:c6:12:b8:83:f9:1d:62:9d:b9:53:72:64:
23:16:eb:96:78:f2:44:cd:6c:e3:22:90:c5:05:5c:77:c8:af:
27:02:20:ff:70:75:39:95:c4:5a:68:50:7f:21:81:01:cd:f0:
44:7b:10:d1:74:b8:3d:10:2d:9d:c4:f7:bf:3c:2e:59:75:12:
bb:9c:48:f4:6e:31:07:41:ea:bd:32:d1:be:cc:c3:31:5a:ec:
38:51:dd:48:94:c7:14:5b:04:1c:6b:8f:03:6c:39:22:45:2c:
af:b3:9a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:50:20 2025 by rpki-client